IoT Hub Integration

Question

Question, is it possible to pull the IoT device information from the Azure IoT Hub into a firewall device (i.e. Fortigate, Palo Alto, CheckPoint, etc), to be used to build enforcement (rules) policies.

Answer 1

Hello @Mitchell,I,Ian,VSC R,

welcome to this moderated Azure community forum.

I expect you want to know which device is communication to the cloud using which IP address over what port to some endpoints (an IoT Hub or more).

The IoT Hub lists devices with a logical name (Device Id) and each device has it's own credentials (eg. symmetric keys or a certificate). Each device also has a device twin with some custom tags to group devices and eg. desired en reported properties for remote configuration.

Each device runs some logic to connect to the IoT Hub in a secure way. Actually, it's recommended to connect with another service, the Device Provisioning Service, to get an IoT Hub appointed if there are multiple hubs available (now or in the future).

The client selects the protocol (MQTT, AMQP; perhaps over websockets).

The means the IoT Hub does not have any notion about device host names, the device IP addresses or the protocol used by the client. The IoT Hub is also not aware which port each device us using.

Please check this blog post about how an IoT Hub can secure the communication.

There you can see the IP address of IoT Hub can change over time (announced by Microsoft upfront).

If your firewall understands the full qualified name of an IoT Hub, this could help.

Regarding device hostnames or IP addresses, these could be made part of the IoT Hub device registration using the tags. These can be queried using the API/CLI provided.

---

If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.